BSD

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Composer — Command injection vulnerability Related CVEs: CVE-2022-24828 Upstream summary: Composer developers reports: The Composer method VcsDriver::getFileContent() with user-controlled $file or $identifier arguments is susceptible to an argument injection vulnerability. […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-Scrapy — DoS vulnerability Related CVEs: CVE-2017-14158 CVE-2022-0577 Upstream summary: kmike and nramirezuy report: Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: phpmyfaq — multiple vulnerabilities Related CVEs: CVE-2023-5863 CVE-2023-5865 Upstream summary: phpMyFAQ team reports: Stored cross-site scripting (XSS) and unauthenticated config backup download vulnerability Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 February 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: vorbistools — heap buffer overflow in oggenc Related CVEs: CVE-2008-1686 CVE-2014-9638 CVE-2014-9639 CVE-2015-6749 CVE-2023-43361 Upstream summary: Frank-Z7 reports: Heap buffer overflow when vorbis-tools/oggenc converts WAV files to Ogg files. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2023 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Kanboard — Multiple vulnerabilities Related CVEs: CVE-2023-32685 CVE-2023-33956 CVE-2023-33968 CVE-2023-33969 CVE-2023-33970 Upstream summary: Kanboard is project management software that focuses on the Kanban methodology. The last update includes 4 vulnerabilities: […]

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: clamav — Possbile denial-of-service vulnerability Related CVEs: CVE-2022-20698 CVE-2022-20770 CVE-2022-20771 CVE-2022-20785 CVE-2022-20792 CVE-2022-20796 CVE-2022-20803 CVE-2023-20032  +8 more Upstream summary: The ClamAV project reports: A possible buffer overflow read bug is […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-WsgiDAV — XSS vulnerability Related CVEs: CVE-2022-41905 Upstream summary: Implementations using this library with directory browsing enabled may be susceptible to Cross Site Scripting (XSS) attacks. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 January 2023 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jellyfin — Multiple vulnerabilities Related CVEs: CVE-2023-30626 CVE-2023-30627 Upstream summary: [email protected] reports: Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a […]